Route Origin Authorization

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/7cdbae49141c162645888e588c0581726a6b87a1.roa
File:                     7cdbae49141c162645888e588c0581726a6b87a1.roa (raw, json)
Hash identifier:          RdxW3jJRarXzkrdMH4rGE68wkqym+f4S26xLytfqphw=
Subject key identifier:   1D:0A:E5:B8:23:CA:00:68:09:A1:49:CA:C4:F9:A3:78:C4:F1:74:13
Certificate issuer:       /CN=38edaf5613c2262fc6910e377ea3f09ce2474e6b
Certificate serial:       158000
Authority key identifier: C2:9E:9D:75:F7:01:5A:BA:4A:79:AA:3C:79:EB:96:CB:3B:FF:F5:09
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38edaf5613c2262fc6910e377ea3f09ce2474e6b.cer
Subject info access:      rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/7cdbae49141c162645888e588c0581726a6b87a1.roa
Signing time:             Fri 27 May 2022 17:29:40 +0000
ROA not before:           Fri 27 May 2022 03:00:00 +0000
ROA not after:            Mon 27 May 2024 03:00:00 +0000
asID:                     265695
IP address blocks:        45.5.8.0/22 maxlen: 22
                          2803:9c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1409024 (0x158000)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38edaf5613c2262fc6910e377ea3f09ce2474e6b
        Validity
            Not Before: May 27 03:00:00 2022 GMT
            Not After : May 27 03:00:00 2024 GMT
        Subject: CN=7cdbae49141c162645888e588c0581726a6b87a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b3:58:ac:b3:cd:6e:3d:0c:b0:71:d1:5f:8f:
                    af:20:cd:4c:48:47:c1:0b:78:23:fd:83:88:75:b5:
                    76:82:d3:47:c2:cf:7a:51:45:f9:e1:71:db:89:d5:
                    33:c7:da:22:e2:cd:bf:9a:92:86:5b:44:1a:39:e1:
                    97:3f:d9:93:0c:bf:d4:f2:4d:8c:f5:91:5e:ea:ec:
                    a5:10:fc:6e:01:a2:3c:97:b6:f5:f3:93:c0:da:05:
                    44:41:fc:76:62:85:ab:57:47:22:1c:26:e5:fd:78:
                    77:23:70:82:42:6a:53:00:27:07:42:1b:a0:94:2a:
                    01:c8:83:e6:41:86:43:99:02:5a:1e:a0:de:53:4c:
                    65:49:0c:fa:08:4d:a4:8e:ab:95:1e:d3:74:5f:39:
                    20:41:99:e5:34:c7:f5:ff:ed:d8:99:c2:2f:af:28:
                    be:fc:fd:34:ed:08:9a:f7:73:7c:59:03:14:36:3b:
                    a1:fc:07:0f:da:96:9f:10:74:35:f5:7e:5a:3e:da:
                    c4:7d:29:0e:03:f8:d9:3a:cc:14:3a:99:0f:d2:c6:
                    16:90:90:5b:76:76:37:e6:ff:0a:36:dc:6f:04:66:
                    dd:ef:80:8c:8b:ce:c6:d0:db:42:5d:ab:8e:18:3c:
                    ab:10:73:ef:00:b7:de:c3:30:52:34:04:24:b0:43:
                    ec:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0A:E5:B8:23:CA:00:68:09:A1:49:CA:C4:F9:A3:78:C4:F1:74:13
            X509v3 Authority Key Identifier:
                keyid:C2:9E:9D:75:F7:01:5A:BA:4A:79:AA:3C:79:EB:96:CB:3B:FF:F5:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38edaf5613c2262fc6910e377ea3f09ce2474e6b.cer

            Subject Information Access:
                Signed Object - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/7cdbae49141c162645888e588c0581726a6b87a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/c3b408aa-6d5a-4a39-92b4-132f98e51723/38edaf5613c2262fc6910e377ea3f09ce2474e6b.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.8.0/22
                IPv6:
                  2803:9c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:cb:2c:e2:26:24:f8:b6:81:ee:d9:16:cc:b3:60:52:3c:01:
         a9:cb:56:20:22:9e:70:c0:4b:4a:fa:99:da:09:5b:39:89:1e:
         57:c1:c0:a3:8f:7f:15:64:38:4d:76:39:f3:9d:86:f4:84:59:
         51:c6:09:76:7e:27:85:5b:59:0f:05:b3:83:63:84:9a:7d:06:
         6d:60:d5:cf:07:c6:07:52:96:e0:f4:39:b1:0b:5b:cc:b7:03:
         10:35:79:ea:24:f7:64:b2:cc:e6:88:5f:97:07:41:f8:3e:e6:
         a5:5a:d7:e1:95:13:9d:f3:47:95:25:bf:13:4f:2e:6e:f8:c2:
         47:90:29:85:a4:17:c5:d1:66:67:25:da:57:08:f7:40:11:ac:
         85:98:50:86:e5:43:a6:6b:ac:01:f8:f5:17:60:4c:78:84:42:
         cd:a3:6c:f0:79:b0:b7:f2:2a:84:cb:12:8b:ef:89:5b:ac:e7:
         9b:9b:a6:45:05:b2:c7:e0:d4:da:b8:5c:8f:67:5b:7e:01:24:
         e2:bd:3a:81:1d:f8:7d:c6:de:69:82:48:62:b3:cf:ce:4f:0c:
         20:a5:46:2c:23:a4:57:0f:80:99:8b:d3:97:7e:85:d7:c2:b1:
         0a:25:30:51:06:11:09:f2:0b:20:2d:e3:ea:b4:c5:af:53:fc:
         b4:d1:21:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----